README.TXT

PRACTICAL CRYPTOJACKING TUTORIAL
Environment used in creating this tutorial:

Linux Mint 20 Cinnamon
Kernel: 5.4.0
HOSTING A CRYPTOJACKING ON THE WEB SERVER
For your cryptojacking to work, you must disable your browser's cryptominer blocker.

It has been tested on the following browsers:

Mozilla Firefox 88.0
The first step is to fork this repository, so you have a copy of the repository;

Create an account on WebMinePool , choose the become a provider mode;

Then log in;

Go to Api Keys and copy the SiteKey key;

Paste it into the siteKey variable in the index.html file available in your copy of the repository;

Create an account on Heroku , after creating the account check your email;

Click on Create a new app, give the app a name and a region;

After that you must choose the Deploy method, connect your GitHub, and choose the copy of the repository;

To finish, click on Deploy Branch;

Okay, the page already has the cryptojacking attack working, now we just have to wait for the victims.

Note: Disabling browser cryptominer blocking

Preferences -> Privacy and Security -> Custom -> Uncheck "Cryptominers"
HOSTING CRYPTOJACKING ON YOUR MACHINE
For your cryptojacking to work, you must disable your browser's cryptominer blocker.

This part of the tutorial was tested in the following environment:

Máquina Virtual - VMware Workstation 16
Mozilla Firefox 78.10esr
Kali Linux 20.04 Kernel: 5.9.0
Apache/2.4.46
Before starting, it is recommended to have a Provider account on the WebMinePool website .

First of all, let's install our server.

To do this, open a terminal and type the commands below:

Update the repository list.

$ sudo apt update
Install the apache2 package, which will be our server.
$ sudo apt install apache2
We must start the process from our web server.
$ sudo service apache2 restart
To test your server, open your browser and type localhostin the address bar.

You should see an Apache server welcome page.

Now clone this repository.

Open a terminal and type the following command:

$ cd /var/www/html && sudo git clone https://github.com/ecorreas/Cryptojacking.git

Now we have to change the index.html file and add our siteKey .
$ sudo nano /var/www/html/Cryptojacking/index.html
Change the siteKey variable on line 9 by replacing it with the siteKey obtained from the API Keys tab on the WebMinePool website .

If everything has gone well so far, your cryptojacking is ready to mine.

Just open your browser and access the URL: localhost/Cryptojacking/index.php.

When typing top in your terminal, notice the process called Web Content, it should appear at the top of the list consuming a lot of CPU.